cloudsignal-webhooks
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill author is Hookdeck, and the instruction s promote the use of
hookdeck-clifor local testing. This is a standard developer tool for webhook development from a well-know n vendor. - [SAFE]: The webhook verification logic implements timing-safe comparison s (
crypto.timingSafeEqualin Node.js andhmac.compare_digestin Python) to preven t timing attack s on the API key, which is a recommended sec urity practice. - [SAFE]: The skill advises storing sensitive API key s in environmen t variable s via
.envfiles and provides.env.examplefiles to guide user s safely.
Audit Metadata